static analysis of C/C++ code

Code style checking for RSpec files

Static analysis for security compliance and design quality of Java projects

Static code analysis for Kotlin

All-in-one devtool to automatically analyze, search and visualize project modules and dependencies from JavaScript, TypeScript (JSX/TSX) and Node.js (ES6, CommonJS)

Code analyzer for C# and VB.NET projects

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language

The Fuzion Language Implementation

Static Analyzer for Solidity and Vyper

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.

Extensions for PHPStan

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.

A static analyzer for Java, C, C++, and Objective-C

ttempdir detects temporary directories not using t.TempDir

FirmwareDroid is an analysis framework for Android firmware.

Performant type-checking for python.

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Static analysis framework for C

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.